View CSAF Summary WinCC Certificate Manager insufficiently protects key material that could allow an attacker to extract sensitive information. Siemens has released a new version for SIMATIC WinCC Unified PC Runtime V21 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available. The following versions of Siemens WinCC Certificate Manager are affected: SIMATIC WinCC Unified PC Runtime V16 vers:all/*  SIMATIC WinCC Unified PC Runtime V17 vers:all/*  SIMATIC WinCC Unified PC Runtime V18 vers:all/*  SIMATIC WinCC Unified PC Runtime V19 vers:all/*  SIMATIC WinCC Unified PC Runtime V20 vers:all/*  SIMATIC WinCC Unified PC Runtime V21 vers:intdot/<21.0.2 CVSS Vendor Equipment Vulnerabilities v3 7.1 Siemens Siemens WinCC Certificate Manager Cleartext Storage in a File or on Disk Background Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities Expand All + CVE-2026-24349 Insufficient protection of key material in WinCC Certificate Manager that could allow an attacker to extract sensitive information. View CVE Details Affected Products Siemens WinCC Cer...